transparent bridge
-
hi there
First of all, my native language is not English; correct me if I have wrong grammar. I work in a hotel where we changed the equipment brand to Ruijie, but I have an existing Netgate 7100. The snort is a rock-solid IDS application. Is this possible with a transparent bridge WAN/LAN and do I need to disable the NAT? any tips
thank you
-
This post is deleted! -
@publictoiletbowl said in transparent bridge:
You want to snort on your WAN (ISP1 & ISP2) interfaces but let the 3rd party router do all other tasks.
Transparent bridging does work, see in the Netgate documentation. Not sure about the performance penalty of it, what upstream speed to you get from your ISPs?
https://docs.netgate.com/pfsense/en/latest/bridges/index.html#internal-external-bridges
The 3rd party router will get the public IPs from ISP1 and ISP2 and you will want to setup one of the other interfaces as admin interfaces to be able to access the pfSense.
